Michel Dänzer e1fc12c5d9 drm/ttm: Always and only destroy bo->ttm_resv in ttm_bo_release_list ... Fixes a use-after-free due to a race condition in ttm_bo_cleanup_refs_and_unlock, which allows one task to reserve a BO and destroy its ttm_resv while another task is waiting for it to signal in reservation_object_wait_timeout_rcu. v2: * Always initialize bo->ttm_resv in ttm_bo_init_reserved (Christian König) Fixes: 0d2bd2ae04 "drm/ttm: fix memory leak while individualizing BOs" Reviewed-by: Chunming Zhou <david1.zhou@amd.com> # v1 Reviewed-by: Christian König <christian.koenig@amd.com> Signed-off-by: Michel Dänzer <michel.daenzer@amd.com> Signed-off-by: Alex Deucher <alexander.deucher@amd.com>		2017-11-04 09:48:01 -04:00
..
drm	drm/ttm: Always and only destroy bo->ttm_resv in ttm_bo_release_list	2017-11-04 09:48:01 -04:00
host1x	gpu: host1x: Fix incorrect comment for channel_request	2017-10-20 14:19:52 +02:00
ipu-v3	gpu: ipu-v3: pre: implement workaround for ERR009624	2017-10-11 12:04:24 +02:00
vga	vgaarb: Factor out EFI and fallback default device selection	2017-10-18 10:04:56 +02:00
Makefile